Skip to contentSkip to conversation

util-linux: add security patch for CVE-2014-9114

PATCH New Gustavo Zacarias 2 participants 2 messages Dec 10, 2014

lore
Share & tools
lore

Gustavo Zacarias

author
#0 lore raw

PATCH 1/1 util-linux: add security patch for CVE-2014-9114

Fixes CVE-2014-9114 - command injection flaw in blkid. See https://bugzilla.redhat.com/show_bug.cgi?id=1168485
Patch upstream.

Signed-off-by Gustavo Zacarias <[email protected]>
---
 ...f-no-ms-as.patch => 0001-sscanf-no-ms-as.patch} |   0
 ...ch => 0002-program-invocation-short-name.patch} |   0
 ...ine-mkostemp-for-older-version-of-uClibc.patch} |   0
 package/util-linux/0004-fix-CVE-2014-9114.patch    | 168 +++++++++++++++++++++
 4 files changed, 168 insertions(+)
 rename package/util-linux/{util-linux-001-sscanf-no-ms-as.patch => 0001-sscanf-no-ms-as.patch} (100%)
 rename package/util-linux/{util-linux-002-program-invocation-short-name.patch => 0002-program-invocation-short-name.patch} (100%)
 rename package/util-linux/{util-linux-003-c.h-define-mkostemp-for-older-version-of-uClibc.patch => 0003-c.h-define-mkostemp-for-older-version-of-uClibc.patch} (100%)
 create mode 100644 package/util-linux/0004-fix-CVE-2014-9114.patch
package/util-linux/0001-sscanf-no-ms-as.patch renamed from package/util-linux/util-linux-001-sscanf-no-ms-as.patch +0 -0
similarity index 100%
rename from package/util-linux/util-linux-001-sscanf-no-ms-as.patch
rename to package/util-linux/0001-sscanf-no-ms-as.patch
package/util-linux/0002-program-invocation-short-name.patch renamed from package/util-linux/util-linux-002-program-invocation-short-name.patch +0 -0
similarity index 100%
rename from package/util-linux/util-linux-002-program-invocation-short-name.patch
rename to package/util-linux/0002-program-invocation-short-name.patch
package/util-linux/0003-c.h-define-mkostemp-for-older-version-of-uClibc.patch renamed from package/util-linux/util-linux-003-c.h-define-mkostemp-for-older-version-of-uClibc.patch +0 -0
similarity index 100%
rename from package/util-linux/util-linux-003-c.h-define-mkostemp-for-older-version-of-uClibc.patch
rename to package/util-linux/0003-c.h-define-mkostemp-for-older-version-of-uClibc.patch
package/util-linux/0004-fix-CVE-2014-9114.patch new file +168 -0

168 lines not on this page · raw message

Signature · 1 line
2.0.4
Applied
#1 lore raw

PATCH 1/1 util-linux: add security patch for CVE-2014-9114

Dear Gustavo Zacarias,

Quoted 5 lines · Gustavo Zacarias

Fixes CVE-2014-9114 - command injection flaw in blkid. See https://bugzilla.redhat.com/show_bug.cgi?id=1168485
Patch upstream.

Signed-off-by Gustavo Zacarias <[email protected]>

Applied, thanks.

Thomas

Signature · 3 lines
Thomas Petazzoni, CTO, Free Electrons
Embedded Linux, Kernel and Android engineering
http://free-electrons.com